analyzeMFT - analyzeMFT
analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem
and present the results as accurately as possible in multiple formats.
by Lawrence R. Rogers (2018-03-23):
- Release 220.127.116.11
Changes current to 2018-03-23.
by Lawrence R. Rogers (2016-05-27):
- Release 2.0.19
v2.0.19,05/27/2016 - (Contributed by lespea)
- Properly deal with fncnt findings > 3
- Allow the user to use either windows or unix path seperators
- General code cleanup
by Lawrence R. Rogers (2013-10-04):
- Release 2.0.11
Initial release to the CERT Linux Repository